# CVEs published 2009-04-16

10 CVEs were published on April 16, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2007-2238](https://cve.now/CVE-2007-2238.md): Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent… (no CVSS)
- [CVE-2008-4830](https://cve.now/CVE-2008-4830.md): Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL… (no CVSS)
- [CVE-2008-5259](https://cve.now/CVE-2008-5259.md): Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via… (no CVSS)
- [CVE-2009-0196](https://cve.now/CVE-2009-0196.md): Heap-based buffer overflow in the big2\_decode\_symbol\_dict function (jbig2\_symbol\_dict.c) in the JBIG2 decoding library (jbig2dec) in… (no CVSS)
- [CVE-2009-0579](https://cve.now/CVE-2009-0579.md): Linux-PAM before 1.0.4 does not enforce the minimum password age (MINDAYS) as specified in /etc/shadow, which allows local users to bypass… (no CVSS)
- [CVE-2009-1285](https://cve.now/CVE-2009-1285.md): Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x before 3.1.3.2… (no CVSS)
- [CVE-2009-1293](https://cve.now/CVE-2009-1293.md): The web login functionality (c/portal/login) in Novell Teaming 1.0 through SP3 (1.0.3) generates different error messages depending on… (no CVSS)
- [CVE-2009-1294](https://cve.now/CVE-2009-1294.md): Multiple cross-site scripting (XSS) vulnerabilities in web/guest/home in the Liferay 4.3.0 portal in Novell Teaming 1.0 through SP3… (no CVSS)
- [CVE-2009-1300](https://cve.now/CVE-2009-1300.md): apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in… (no CVSS)
- [CVE-2009-1301](https://cve.now/CVE-2009-1301.md): Integer signedness error in the store\_id3\_text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-04-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.